li-fi-sdk

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is an SDK specifically designed to perform on-chain financial operations. It explicitly provides functions to obtain quotes/routes and to execute token swaps and cross-chain bridges (e.g., getQuote, getRoutes, convertQuoteToRoute, executeRoute, execute a quote), manage transaction lifecycle (resumeRoute, stopRouteExecution, updateRouteExecution), perform contract calls, and build payment flows that accept and convert tokens. It also includes hooks for signing/sending transactions (updateTransactionRequestHook, switchChainHook, wallet client usage). These are concrete crypto transaction and wallet operations intended to move funds on-chain, not generic tooling. Therefore it grants direct financial execution capability.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 12:18 AM